agent-enderun 1.11.2 → 1.11.4

package/src/modules/agents/definitions.ts

@@ -82,7 +82,6 @@ const CLAUDE_TOOL_MAP: Record<string, string> = {
     get_framework_status:  "Bash",
     get_system_health:     "Bash",
     check_active_ports:    "Bash",
-    start_dashboard:       "Bash",
     update_contract_hash:  "Write",
     acquire_lock:          "Write",
     release_lock:          "Write",
@@ -121,7 +120,6 @@ const GEMINI_TOOL_MAP: Record<string, string> = {
     get_framework_status:  "run_shell_command",
     get_system_health:     "run_shell_command",
     check_active_ports:    "run_shell_command",
-    start_dashboard:       "run_shell_command",
     update_contract_hash:  "write_file",
     acquire_lock:          "write_file",
     release_lock:          "write_file",
@@ -174,6 +172,7 @@ function buildSystemPrompt(
     ag: AgentDefinition,
     baseKnowledgeDir: string = path.join(getPackageRoot(), "templates/standards"),
     stripMetaComments = false,
+    paths: Record<string, string> = { backend: "apps/backend", frontend: "apps/web", mobile: "apps/mobile", docs: "docs" }
 ): string {
     const metaHeader = stripMetaComments ? [] : [
         `<!-- name: ${ag.name} -->`,
@@ -195,6 +194,13 @@ function buildSystemPrompt(
         `**Primary Role:** ${ag.role}`,
         `**Authority Tier:** ${ag.tier} (Capability: ${ag.capability}/10)`,
         "",
+        "## Project Structure",
+        `This project uses the following directory structure:`,
+        `- **Backend:** \`${paths.backend}\``,
+        `- **Frontend:** \`${paths.frontend}\``,
+        `- **Mobile:** \`${paths.mobile}\``,
+        `- **Documentation:** \`${paths.docs}\``,
+        "",
         "## Chain of Thought Protocol",
         "> Follow these steps in strict order for every task:",
         "",
@@ -213,6 +219,7 @@ function buildSystemPrompt(
         "- Never perform irreversible operations (schema drops, bulk deletes) without @manager approval.",
         "- Prefer surgical edits (`replace_text`, `patch_file`) over full file rewrites.",
         "- Escalate ambiguity to @manager instead of guessing.",
+        `- Ensure all development happens exclusively inside \`${paths.backend}\`, \`${paths.frontend}\`, or \`${paths.mobile}\`.`,
     ];
 
     if (ag.instructions.knowledgeFiles?.length) {
@@ -237,7 +244,7 @@ function buildSystemPrompt(
 //  Ref: https://docs.anthropic.com/en/docs/claude-code/sub-agents
 // ─────────────────────────────────────────────────────────────────────────────
 
-export function toClaudeCodeMd(ag: AgentDefinition, baseKnowledgeDir?: string): string {
+export function toClaudeCodeMd(ag: AgentDefinition, baseKnowledgeDir?: string, paths?: Record<string, string>): string {
     const tools = [...new Set(ag.tools.map((t: string) => CLAUDE_TOOL_MAP[t] ?? t))];
     const model = resolveModel(ag.capability, "claude-code");
     const color = ag.tier === "supreme" ? "purple"
@@ -256,7 +263,7 @@ export function toClaudeCodeMd(ag: AgentDefinition, baseKnowledgeDir?: string):
         "---",
     ].join("\n");
 
-    return `${frontmatter}\n\n${buildSystemPrompt(ag, baseKnowledgeDir)}`;
+    return `${frontmatter}\n\n${buildSystemPrompt(ag, baseKnowledgeDir, false, paths)}`;
 }
 
 // ─────────────────────────────────────────────────────────────────────────────
@@ -265,12 +272,10 @@ export function toClaudeCodeMd(ag: AgentDefinition, baseKnowledgeDir?: string):
 //  Ref: https://ai.google.dev/gemini-api/docs/agents
 // ─────────────────────────────────────────────────────────────────────────────
 
-export function toGeminiCliMd(ag: AgentDefinition, baseKnowledgeDir?: string): string {
+export function toGeminiCliMd(ag: AgentDefinition, baseKnowledgeDir?: string, paths?: Record<string, string>): string {
     const tools = [...new Set(ag.tools.map((t: string) => GEMINI_TOOL_MAP[t] ?? t))];
     const model = resolveModel(ag.capability, "gemini-cli");
 
-    // Only officially supported frontmatter fields — no capability, no tags, no color.
-    // Gemini CLI's strict Zod validator rejects any unrecognized keys.
     const frontmatter = [
         "---",
         `name: ${ag.name}`,
@@ -282,9 +287,16 @@ export function toGeminiCliMd(ag: AgentDefinition, baseKnowledgeDir?: string): s
         "---",
     ].join("\n");
 
-    // stripMetaComments=true: Gemini CLI's validator misparses <!-- tags: ... --> HTML
-    // comments at the top of the body as unrecognized frontmatter keys.
-    return `${frontmatter}\n\n${buildSystemPrompt(ag, baseKnowledgeDir, true)}`;
+    const body = buildSystemPrompt(ag, baseKnowledgeDir, true, paths);
+
+    const metaFooter = [
+        "",
+        `<!-- name: ${ag.name} -->`,
+        `<!-- capability: ${ag.capability} -->`,
+        `<!-- tags: ${JSON.stringify(ag.tags)} -->`,
+    ].join("\n");
+
+    return `${frontmatter}\n\n${body}${metaFooter}`;
 }
 
 // ─────────────────────────────────────────────────────────────────────────────
@@ -292,7 +304,7 @@ export function toGeminiCliMd(ag: AgentDefinition, baseKnowledgeDir?: string): s
 //  Spec: Antigravity customAgentSpec JSON schema
 // ─────────────────────────────────────────────────────────────────────────────
 
-export function toAntigravityJson(ag: AgentDefinition, baseKnowledgeDir?: string): string {
+export function toAntigravityJson(ag: AgentDefinition, baseKnowledgeDir?: string, paths?: Record<string, string>): string {
     const knowledgeBase = baseKnowledgeDir ?? path.join(getPackageRoot(), "templates/standards");
 
     // Embed actual file contents so the agent can read governance docs
@@ -316,6 +328,16 @@ export function toAntigravityJson(ag: AgentDefinition, baseKnowledgeDir?: string
                         title: "Identity & Mission",
                         content: `${ag.instructions.identity}\n\n**Mission:** ${ag.instructions.mission}`,
                     },
+                    {
+                        title: "Project Structure",
+                        content: [
+                            "This project uses the following directory structure:",
+                            `- Backend: ${paths?.backend || "apps/backend"}`,
+                            `- Frontend: ${paths?.frontend || "apps/web"}`,
+                            `- Mobile: ${paths?.mobile || "apps/mobile"}`,
+                            `- Documentation: ${paths?.docs || "docs"}`,
+                        ].join("\n"),
+                    },
                     {
                         title: "Chain of Thought Protocol",
                         content: ag.instructions.chainOfThought,
@@ -332,6 +354,7 @@ export function toAntigravityJson(ag: AgentDefinition, baseKnowledgeDir?: string
                             "- Read PROJECT_MEMORY.md at session start.",
                             "- Prefer surgical edits over full file rewrites.",
                             "- Escalate high-risk operations to @manager.",
+                            `- Ensure development happens inside ${paths?.backend || "apps/backend"}, ${paths?.frontend || "apps/web"}, or ${paths?.mobile || "apps/mobile"}.`,
                         ].join("\n"),
                     },
                     ...knowledgeSections,
@@ -351,7 +374,7 @@ export const buildAgentJson = toAntigravityJson;
 //  Valid fields: agent-type, display-name, when-to-use, model, allowed-tools
 // ─────────────────────────────────────────────────────────────────────────────
 
-export function toCodexMd(ag: AgentDefinition, baseKnowledgeDir?: string): string {
+export function toCodexMd(ag: AgentDefinition, baseKnowledgeDir?: string, paths?: Record<string, string>): string {
     const model = resolveModel(ag.capability, "codex-cli");
     const tools = [...new Set(ag.tools.map((t: string) => {
         if (["read_file","view_file","list_dir","grep_search","get_memory_insights","read_project_memory","get_project_map","get_project_gaps","get_framework_status"].includes(t)) return "read";
@@ -359,7 +382,6 @@ export function toCodexMd(ag: AgentDefinition, baseKnowledgeDir?: string): strin
         return "shell";
     }))];
 
-    // Only officially supported Codex CLI frontmatter fields — no tier, no capability
     const frontmatter = [
         "---",
         `agent-type: "${ag.name}"`,
@@ -371,9 +393,16 @@ export function toCodexMd(ag: AgentDefinition, baseKnowledgeDir?: string): strin
         "---",
     ].join("\n");
 
-    // stripMetaComments=true: Codex CLI may also have strict frontmatter validation;
-    // HTML comment metadata is Enderun-internal and not needed by the platform.
-    return `${frontmatter}\n\n${buildSystemPrompt(ag, baseKnowledgeDir, true)}`;
+    const body = buildSystemPrompt(ag, baseKnowledgeDir, true, paths);
+
+    const metaFooter = [
+        "",
+        `<!-- name: ${ag.name} -->`,
+        `<!-- capability: ${ag.capability} -->`,
+        `<!-- tags: ${JSON.stringify(ag.tags)} -->`,
+    ].join("\n");
+
+    return `${frontmatter}\n\n${body}${metaFooter}`;
 }
 
 // ─────────────────────────────────────────────────────────────────────────────
@@ -382,7 +411,7 @@ export function toCodexMd(ag: AgentDefinition, baseKnowledgeDir?: string): strin
 //  Ref: https://docs.cursor.com/context/rules
 // ─────────────────────────────────────────────────────────────────────────────
 
-export function toCursorMdc(ag: AgentDefinition, baseKnowledgeDir?: string): string {
+export function toCursorMdc(ag: AgentDefinition, baseKnowledgeDir?: string, paths?: Record<string, string>): string {
     const glob = CURSOR_AGENT_GLOBS[ag.name] || "**/*";
     // Only officially supported Cursor MDC frontmatter fields
     const frontmatter = [
@@ -393,7 +422,7 @@ export function toCursorMdc(ag: AgentDefinition, baseKnowledgeDir?: string): str
         "---",
     ].join("\n");
 
-    return `${frontmatter}\n\n${buildSystemPrompt(ag, baseKnowledgeDir)}`;
+    return `${frontmatter}\n\n${buildSystemPrompt(ag, baseKnowledgeDir, false, paths)}`;
 }
 
 // ─────────────────────────────────────────────────────────────────────────────
@@ -407,19 +436,19 @@ export interface ExportedFile {
   content: string;
 }
 
-export function exportAllAgents(target: ExportTarget): ExportedFile[] {
+export function exportAllAgents(target: ExportTarget, paths?: Record<string, string>): ExportedFile[] {
     return ALL_AGENTS.map(ag => {
         switch (target) {
             case "claude-code":
-                return { path: `.claude/agents/${ag.name}.md`,         content: toClaudeCodeMd(ag) };
+                return { path: `.claude/agents/${ag.name}.md`,         content: toClaudeCodeMd(ag, undefined, paths) };
             case "gemini-cli":
-                return { path: `.gemini/agents/${ag.name}.md`,         content: toGeminiCliMd(ag) };
+                return { path: `.gemini/agents/${ag.name}.md`,         content: toGeminiCliMd(ag, undefined, paths) };
             case "antigravity":
-                return { path: `.agents/${ag.name}/agent.json`,        content: toAntigravityJson(ag) };
+                return { path: `.agents/${ag.name}/agent.json`,        content: toAntigravityJson(ag, undefined, paths) };
             case "codex-cli":
-                return { path: `.agents/${ag.name}.md`,                content: toCodexMd(ag) };
+                return { path: `.agents/${ag.name}.md`,                content: toCodexMd(ag, undefined, paths) };
             case "cursor":
-                return { path: `.cursor/rules/${ag.name}.mdc`,         content: toCursorMdc(ag) };
+                return { path: `.cursor/rules/${ag.name}.mdc`,         content: toCursorMdc(ag, undefined, paths) };
         }
     });
 }

package/src/modules/agents/registry/analyst.ts

@@ -39,6 +39,6 @@ export const analyst: AgentDefinition = {
             "VERSIONING INTEGRITY: Validate that all API versioning changes are correctly registered in 'contract.version.json'.",
             "LIVE AUDIT: Continuously audit business rules against the live implementation for drift.",
         ],
-        knowledgeFiles: ["architecture-standards.md", "crud-governance.md"],
+        knowledgeFiles: ["architecture-standards.md", "crud-governance.md", "governance-standards.md", "quality-standards.md"],
     },
 };

package/src/modules/agents/registry/architect.ts

@@ -42,6 +42,6 @@ export const architect: AgentDefinition = {
             "CONTRACT STABILITY: Validate 'contract.version.json' consistency before and after every schema change.",
             "GOVERNANCE READ: Always read architecture governance docs before making design decisions.",
         ],
-        knowledgeFiles: ["architecture-standards.md"],
+        knowledgeFiles: ["architecture-standards.md", "governance-standards.md", "performance-standards.md"],
     },
 };

package/src/modules/agents/registry/backend.ts

@@ -43,6 +43,6 @@ export const backend: AgentDefinition = {
             "HIGH-RISK OPS: Refuse User/Role management, bulk deletes, schema alterations, and billing changes autonomously. " +
       "Return a standard refusal, send a managerApproval request to @manager, and shift to WAITING status.",
         ],
-        knowledgeFiles: ["crud-governance.md", "kysely-standards.md", "typeorm-standards.md"],
+        knowledgeFiles: ["crud-governance.md", "kysely-standards.md", "typeorm-standards.md", "auth-standards.md", "swagger-standards.md", "pino-standards.md"],
     },
 };

package/src/modules/agents/registry/database.ts

@@ -38,6 +38,6 @@ export const database: AgentDefinition = {
             "DETERMINISTIC MIGRATIONS: Every migration must be reversible and produce identical results across environments.",
             "PERFORMANCE FIRST: Design indexes proactively — never retroactively after a performance incident.",
         ],
-        knowledgeFiles: ["kysely-standards.md", "typeorm-standards.md", "quality-standards.md"],
+        knowledgeFiles: ["kysely-standards.md", "typeorm-standards.md", "quality-standards.md", "performance-standards.md"],
     },
 };

package/src/modules/agents/registry/devops.ts

@@ -39,6 +39,6 @@ export const devops: AgentDefinition = {
             "ENVIRONMENT ISOLATION: All variables managed via '.env' — hardcoded secrets trigger immediate escalation.",
             "NO UNTRACKED DEPLOYMENTS: Every deployment must be declared, versioned, and traceable.",
         ],
-        knowledgeFiles: ["deployment-standards.md"],
+        knowledgeFiles: ["deployment-standards.md", "github-actions-standards.md", "observability-standards.md", "logging-and-secrets.md"],
     },
 };

package/src/modules/agents/registry/explorer.ts

@@ -36,6 +36,6 @@ export const explorer: AgentDefinition = {
             "DEPENDENCY MAP: Map all file dependencies and surface them to @manager in a structured report.",
             "RECON FIRST: No specialist should act on an unexplored codebase — flag absence of ADP as a phase blocker.",
         ],
-        knowledgeFiles: ["architecture-standards.md"],
+        knowledgeFiles: ["architecture-standards.md", "observability-standards.md"],
     },
 };

package/src/modules/agents/registry/frontend.ts

@@ -43,6 +43,6 @@ export const frontend: AgentDefinition = {
             "OVERFLOW GUARD: Prevent horizontal scroll via proper box-sizing, max-width bounds, and container margins.",
             "ATOMIC UI: Create shared components exclusively in 'apps/web/src/components/ui/'.",
         ],
-        knowledgeFiles: ["frontend-standards.md", "i18n-standards.md"],
+        knowledgeFiles: ["frontend-standards.md", "i18n-standards.md", "react-query-standards.md", "react-router-standards.md", "tailwind-standards.md", "performance-standards.md"],
     },
 };

package/src/modules/agents/registry/git.ts

@@ -36,6 +36,6 @@ export const git: AgentDefinition = {
             "NO FORCE PUSH: Force-pushing to any shared branch is unconditionally forbidden.",
             "GIT FLOW: Strictly follow git-flow branching conventions — feature, hotfix, release naming enforced.",
         ],
-        knowledgeFiles: ["logging-and-secrets.md"],
+        knowledgeFiles: ["logging-and-secrets.md", "governance-standards.md"],
     },
 };

package/src/modules/agents/registry/manager.ts

@@ -30,7 +30,6 @@ export const manager: AgentDefinition = {
         "get_framework_status",
         "get_system_health",
         "check_active_ports",
-        "start_dashboard",
     ],
     instructions: {
         identity: "AL Management Assistant and Supreme Discipline Enforcer",
@@ -54,6 +53,6 @@ export const manager: AgentDefinition = {
             "MEMORY INTEGRITY: Synchronize 'PROJECT_MEMORY.md' after every single turn. Memory drift is treason.",
             "LOCKING PROTOCOL: Always acquire a lock via 'acquire_lock' on 'memory' resource before writing to PROJECT_MEMORY.md. Release immediately after write.",
         ],
-        knowledgeFiles: ["governance-standards.md"],
+        knowledgeFiles: ["governance-standards.md", "llm-governance.md", "crud-governance.md"],
     },
 };

package/src/modules/agents/registry/mobile.ts

@@ -39,6 +39,6 @@ export const mobile: AgentDefinition = {
             "TOUCH TARGETS: All touchable components must have a minimum interactive area of 44dp × 44dp.",
             "OFFLINE FIRST: Implement caching via React Query and local storage for all critical data paths.",
         ],
-        knowledgeFiles: ["mobile-standards.md"],
+        knowledgeFiles: ["mobile-standards.md", "performance-standards.md", "react-query-standards.md"],
     },
 };

package/src/modules/agents/registry/quality.ts

@@ -41,6 +41,6 @@ export const quality: AgentDefinition = {
             "ZERO TOLERANCE: Reject any code containing lint errors, 'any' type usage, or hardcoded 'console.log'.",
             "TEST PATTERN: Enforce Given-When-Then pattern in all test suites without exception.",
         ],
-        knowledgeFiles: ["quality-standards.md", "testing-standards.md"],
+        knowledgeFiles: ["quality-standards.md", "testing-standards.md", "vitest-standards.md", "playwright-standards.md"],
     },
 };

package/src/modules/agents/registry/security.ts

@@ -37,6 +37,6 @@ export const security: AgentDefinition = {
             "RAW SQL FORBIDDEN: Reject any query that bypasses Kysely — zero exceptions.",
             "AUDIT LOGS: Monitor and log all high-risk administrative actions via 'log_agent_action'.",
         ],
-        knowledgeFiles: ["security-standards.md"],
+        knowledgeFiles: ["security-standards.md", "security-audit-standards.md", "auth-standards.md", "logging-and-secrets.md"],
     },
 };

package/src/shared/fs.ts

@@ -1,10 +1,11 @@
 import fs from "fs";
 import path from "path";
+import { logger } from "./logger.js";
 
 export function ensureDir(dirPath: string, dryRun = false): void {
     if (!fs.existsSync(dirPath)) {
         if (dryRun) {
-            console.warn(`[DRY RUN] Would create directory: ${dirPath}`);
+            logger.info(`[DRY RUN] Would create directory: ${dirPath}`);
         } else {
             fs.mkdirSync(dirPath, { recursive: true });
         }
@@ -17,7 +18,7 @@ export function ensureDir(dirPath: string, dryRun = false): void {
  */
 export function writeTextFile(filePath: string, content: string, dryRun = false): void {
     if (dryRun) {
-        console.warn(`[DRY RUN] Would write file: ${filePath}`);
+        logger.info(`[DRY RUN] Would write file: ${filePath}`);
         return;
     }
     const dir = path.dirname(filePath);
@@ -37,7 +38,7 @@ export function writeTextFile(filePath: string, content: string, dryRun = false)
 
 export function appendFile(filePath: string, content: string, dryRun = false): void {
     if (dryRun) {
-        console.warn(`[DRY RUN] Would append to file: ${filePath}`);
+        logger.info(`[DRY RUN] Would append to file: ${filePath}`);
         return;
     }
     ensureDir(path.dirname(filePath));

package/templates/standards/frontend-standards.md

@@ -2,8 +2,13 @@
 
 This document defines the UI/UX standards for projects managed by Agent Enderun. All interfaces must comply with "Mobile-First", "Fluid Responsive", and "Cross-Device Adaptive" principles.
 
-## 1. Design System: Panda CSS & Tailwind Integration
-- **Zero UI Library:** Heavy external UI libraries like Ant Design or MUI are not used. All styles are written with type-safe **Panda CSS** or structured **Tailwind CSS**.
+## 1. Zero UI Library Policy (Supreme Mandate)
+- **NO Third-Party UI Frameworks:** Usage of `@chakra-ui`, `mui`, `@shadcn`, `antd`, or similar pre-built component libraries is **STRICTLY FORBIDDEN**.
+- **Atomic Manual Construction:** Every UI component (Button, Modal, Input, etc.) must be built manually from scratch using atomic CSS principles.
+- **Styling Engine:** All styles must be written with type-safe **Panda CSS** or structured **Tailwind CSS**.
+- **Reasoning:** Pre-built libraries introduce massive bloat, difficult-to-override styles, and dependency lock-in. Agent Enderun enforces pure, lightweight, and 100% customizable UI code.
+
+## 2. Design System: Panda CSS & Tailwind Integration
 - **Token Usage:** Colors, spacing, and font sizes must be managed via the `token()` function or standard CSS variables.
 - **Responsive Syntax:** Object-based responsive syntax is mandatory:
   ```typescript

package/templates/standards/governance-standards.md

@@ -28,7 +28,33 @@ A single TODO, lint error, or unverified contract blocks the phase transition.
 
 ---
 
-## 3. Trace ID Discipline
+## 3. Hermes Self-Healing Protocol
+- If an agent remains in `EXECUTING` state for >30 minutes, the orchestrator triggers **Self-Healing**.
+- The agent is reset to `READY`, and the task is logged for human review or retry.
+- Blocked agents should not be left abandoned; they must be recovered to keep the loop fluid.
+
+---
+
+## 4. Proportional Governance Model (Autonomy Levels)
+Governance controls are mapped to agent autonomy to ensure safety and EU AI Act compliance.
+
+| Level | Mode | Authority | Governance Focus |
+|---|---|---|---|
+| **L1** | Observe | Read-only access | Scoped data access, usage logging |
+| **L2** | Advise | Recommendations only | Accuracy checks, bias mitigation |
+| **L3** | Guided | Action with human "OK" | Meaningful human review (No rubber-stamping) |
+| **L4** | Autonomous| Independent execution | **Circuit breakers**, real-time monitoring |
+
+---
+
+## 5. Circuit Breaker & Kill Switch Protocol
+- **L4 Emergency Stop:** Every autonomous agent **must** support an immediate "Kill Switch" signal.
+- **Recursive Failure Guard:** If an agent chain (Agent A calling Agent B) fails twice at the same node, the entire Trace ID is **Frozen** until human intervention.
+- **Audit Traceability:** Every autonomous action must be attributable to a unique **Agent ID** and **Trace ID** in an immutable log.
+
+---
+
+## 6. Trace ID Discipline
 
 - Every task chain begins with a unique Trace ID (e.g. `TRC-042`).
 - All agent messages, logs, and commits **must** carry the active Trace ID.

package/templates/standards/logging-and-secrets.md

@@ -31,4 +31,4 @@ This document defines the logging discipline and sensitive data (secret) managem
     - Real user data (Emails, Phone Numbers, Full Names, National IDs) must NEVER be logged or stored in agent memories.
     - If a task requires processing PII, use anonymized placeholders or unique hashes in logs.
     - **@security** agent must audit any new log entry for potential PII leakage.
-- **Zero-Trust Memory:** Ajan hafızaları (PROJECT_MEMORY.md) asla gerçek müşteri verisi içermemelidir; sadece teknik meta-data ve mimari kararlar saklanmalıdır.
+- **Zero-Trust Memory:** Agent memories (PROJECT_MEMORY.md) must never contain real customer data; only technical metadata and architectural decisions must be stored.

package/templates/standards/observability-standards.md

@@ -11,5 +11,5 @@ This document defines the requirements for logging, tracing, and observability w
 - **Immutable Logs:** Audit logs should be appended only and never modified or deleted.
 
 ## 3. Monitoring
-- **Health Checks:** Ajanlar periyodik olarak `get_system_health` aracını çağırmalıdır.
+- **Health Checks:** Agents must periodically invoke the `get_system_health` tool.
 - **Alerting:** Critical errors or timeouts must immediately trigger an `ALERT` message to the `@manager` agent for escalation.

package/templates/standards/quality-standards.md

@@ -7,7 +7,8 @@ This document defines the technical discipline rules that all code produced by t
 - **No Explicit Any:** The use of `any` is strictly forbidden. `unknown` should be used for uncertain types and verified with type guards.
 - **Exhaustive Checks:** All cases must be checked (exhaustive) in `switch-case` structures, or safety must be provided with the `never` type.
 
-## 2. ESLint and Static Analysis
+## 2. ESLint and Static Analysis (AST Enforced)
+- **Real-Time AST Audits:** Every file mutation by an agent is scanned via **Abstract Syntax Tree (AST)** analysis. Prohibited patterns (`any`, `console.log`) are blocked at the protocol level.
 - **Zero Warnings:** No ESLint warnings or errors can exist in the codebase.
 - **Naming Conventions:**
   - Variables and functions: `camelCase`

package/bin/enderun-dashboard.js

@@ -1,25 +0,0 @@
-#!/usr/bin/env node
-import { spawn } from "node:child_process";
-import { fileURLToPath } from "node:url";
-import { dirname, join } from "node:path";
-import fs from "node:fs";
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = dirname(__filename);
-
-const cliPath = join(__dirname, "../dist/src/cli/index.js");
-
-if (!fs.existsSync(cliPath)) {
-    process.stderr.write("\n❌ Error: Compiled CLI not found at 'dist/src/cli/index.js'\n");
-    process.stderr.write("💡 Solution Tip: Run 'npm run build' to compile the project first.\n\n");
-    process.exit(1);
-}
-
-const child = spawn("node", [cliPath, "dashboard", ...process.argv.slice(2)], {
-    stdio: "inherit",
-    shell: false 
-});
-
-child.on("exit", (code) => {
-    process.exit(code ?? 0);
-});

package/framework-mcp/src/tools/dashboard/start_dashboard.ts

@@ -1,33 +0,0 @@
-import fs from "fs";
-import path from "path";
-import { exec } from "child_process";
-import { StartDashboardArgs, ToolResult } from "../types.js";
-
-/**
- * Starts the Enderun Web Dashboard server.
- */
-export function handleStartDashboard(projectRoot: string, args: StartDashboardArgs): ToolResult {
-    const port = args.port || 5858;
-    const dashboardScript = path.join(projectRoot, "bin/enderun-dashboard.js");
-
-    if (!fs.existsSync(dashboardScript)) {
-        throw new Error("Dashboard server script not found in bin/enderun-dashboard.js");
-    }
-
-    try {
-        // Start the dashboard as a background process
-        exec(`node "${dashboardScript}"`, {
-            cwd: projectRoot,
-            env: { ...process.env, PORT: String(port) }
-        });
-
-        return {
-            content: [{
-                type: "text",
-                text: `🖥️ **Enderun Web Dashboard started!**\n\nAccess it at: http://localhost:${port}\n\nThis interface will show real-time agent status, system health, and orchestration logs.`
-            }]
-        };
-    } catch (e) {
-        return { isError: true, content: [{ type: "text", text: `Failed to start dashboard: ${String(e)}` }] };
-    }
-}